mirror of https://github.com/apache/cloudstack.git
8f8e311110
On default iptables rules are updated to add ACCEPT egress traffic.
If the network egress default policy is false, CS remove ACCEPT and adds the DROP rule which
is egress default rule when there are no other egress rules.
If the CS network egress default policy is true, CS won't configure any default rule for egress because
router already came up to accept egress traffic. If there are already egress rules for network then the
egress rules get applied on VR.
For isolated network with out firewall service, VR default allows egress traffic (guestnetwork --> public network)
|
||
|---|---|---|
| .. | ||
| baremetal | ||
| hyperv | ||
| kvm | ||
| ovm | ||
| simulator | ||
| ucs | ||
| vmware | ||
| xenserver | ||